This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer File: Sh_na037AXO28xt_NqWpguCNnBk.cer (raw, json) Hash identifier: X3TOL3HjOKZPCF6L+sxxtZdIGggR2kDUmPS+o/L6lIk= Subject key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3AB2 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:20:08 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328748 IP: 102.207.36.0/22 IP: 102.216.156.0/22 IP: 102.221.176.0/22 IP: 2c0f:e9f0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15026 (0x3ab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:20:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:0c:b8:1d:a5:23:4b:86:8a:fe:5e:a0:ef: 49:3a:0c:e7:17:bd:00:1f:a7:49:bf:a9:59:5b:06: 73:19:31:92:41:65:27:ab:33:c2:74:55:ef:77:2f: 87:90:ea:41:a5:d6:70:e0:2b:fd:67:a7:c5:ee:c5: b1:a0:00:3d:85:43:2d:b6:40:53:23:db:0f:60:96: 11:d4:92:24:14:94:02:7a:ee:24:7d:92:06:2f:51: 5f:f0:59:c2:3d:a1:16:9d:3c:bf:5d:c8:15:7b:62: 3b:04:42:cf:58:c6:68:92:a3:d2:aa:72:d5:f6:25: 53:23:3c:2e:f8:9d:c7:3f:e1:6e:4e:28:38:8f:65: e8:c3:4c:c9:ca:f4:34:41:e3:d2:ae:10:cd:25:1b: 14:ca:e5:e8:e5:c2:48:8f:11:55:42:b8:ee:5b:b1: 99:04:29:1f:93:9c:81:bd:c6:0e:c6:10:af:4e:ea: 20:ce:d4:24:08:6a:db:6b:a8:da:99:5d:f8:c5:0a: fa:5b:24:e4:35:2a:f9:45:8a:b0:82:c2:ac:20:37: 13:ca:4e:da:7b:0e:47:62:ca:91:b0:40:a0:fe:87: 3b:90:d9:fd:64:b7:e0:81:fa:2e:03:80:50:b9:a7: 84:3f:0e:21:37:ef:df:5f:c9:76:96:4c:12:46:37: da:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328748 sbgp-ipAddrBlock: critical IPv4: 102.207.36.0/22 102.216.156.0/22 102.221.176.0/22 IPv6: 2c0f:e9f0::/32 Signature Algorithm: sha256WithRSAEncryption be:15:4c:82:19:93:f7:79:e5:a3:c2:2d:cd:c6:bd:61:1b:da: 8c:29:00:10:73:ca:b2:6f:8b:90:a5:5e:4e:cc:d9:75:a7:0b: 77:a3:43:1d:3b:2a:66:da:80:aa:f3:86:83:d2:95:95:d9:79: f0:4b:dc:6d:fe:da:76:8f:90:5c:96:79:8a:21:3c:b1:47:ce: eb:93:65:77:1b:c4:f6:3c:51:bf:a6:65:2a:aa:09:48:ac:e9: c8:fe:44:b2:85:37:3b:8d:43:5b:98:59:40:1d:d2:69:e7:f1: 1e:00:64:f3:fb:0b:28:d6:03:cd:25:39:dc:a9:e2:39:6a:d1: 99:d6:43:b2:b1:97:16:f6:3a:c2:26:8e:cb:b7:3d:03:76:ed: 2a:d0:5d:83:68:b1:b2:4a:32:7f:27:6d:45:fd:f4:7f:9b:30: fb:62:c3:e1:d6:35:37:e1:79:35:ef:11:bb:e8:87:88:5c:ed: 3c:20:d2:76:75:d1:bf:4d:2e:4a:e0:d2:94:cb:67:e4:b4:17: 60:39:22:29:ca:79:af:1c:3a:d7:3e:56:36:50:f5:82:53:0b: 4c:a3:45:7b:77:76:fa:6e:26:e1:6f:78:2e:23:87:51:70:eb: 55:e6:d7:a4:d0:81:3e:64:df:92:38:08:2d:06:c2:e0:f1:2b: 20:d5:f0:8c -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICOrIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjIwMDhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjZGRTZDQUYxMTAvBgNVBAUTKDRBMUZFNzZCNERGQjAxNzNCNkYzMUI3 RjM2QTVBOTgyRTA4RDlDMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM8wy4HaUjS4aK/l6g70k6DOcXvQAfp0m/qVlbBnMZMZJBZSerM8J0Ve93L4eQ 6kGl1nDgK/1np8XuxbGgAD2FQy22QFMj2w9glhHUkiQUlAJ67iR9kgYvUV/wWcI9 oRadPL9dyBV7YjsEQs9YxmiSo9KqctX2JVMjPC74ncc/4W5OKDiPZejDTMnK9DRB 49KuEM0lGxTK5ejlwkiPEVVCuO5bsZkEKR+TnIG9xg7GEK9O6iDO1CQIattrqNqZ XfjFCvpbJOQ1KvlFirCCwqwgNxPKTtp7DkdiypGwQKD+hzuQ2f1kt+CB+i4DgFC5 p4Q/DiE3799fyXaWTBJGN9plAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUSh/na037 AXO28xt/NqWpguCNnBkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2RkU2Qy9CMzM3NDQyNDEzMUIx MUVCQTQxMjFBMzlGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NkZFNkMvQjMzNzQ0MjQxMzFCMTFFQkE0MTIxQTM5RjhBRUEyMjgvU2hfbmEw MzdBWE8yOHh0X05xV3BndUNObkJrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBCwwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJmzyQDBAJm2JwDBAJm 3bAwDQQCAAIwBwMFACwP6fAwDQYJKoZIhvcNAQELBQADggEBAL4VTIIZk/d55aPC Lc3GvWEb2owpABBzyrJvi5ClXk7M2XWnC3ejQx07KmbagKrzhoPSlZXZefBL3G3+ 2naPkFyWeYohPLFHzuuTZXcbxPY8Ub+mZSqqCUis6cj+RLKFNzuNQ1uYWUAd0mnn 8R4AZPP7CyjWA80lOdyp4jlq0ZnWQ7Kxlxb2OsImjsu3PQN27SrQXYNosbJKMn8n bUX99H+bMPtiw+HWNTfheTXvEbvoh4hc7Twg0nZ10b9NLkrg0pTLZ+S0F2A5IinK ea8cOtc+VjZQ9YJTC0yjRXt3dvpuJuFveC4jh1Fw61Xm16TQgT5k35I4CC0GwuDx KyDV8Iw= -----END CERTIFICATE-----Generated at Sun Jan 25 04:18:55 2026 by rpki-client